Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: XJvb5oaMmvTD2h9bm3P5EvlFGFrtutOL3c+yKVa+75I=
Subject key identifier: C6:0B:5F:20:09:79:2C:8D:F9:16:84:E3:03:72:38:77:63:95:21:2A
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01A0D91717C368FD83B63E2A9AE5B5FC4903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 15:02:44 +0000
Manifest this update: Fri 25 Sep 2026 15:02:44 +0000
Manifest next update: Sat 26 Sep 2026 15:02:44 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: myE1ywzvc/rn6jJ1avBbx685dsxXCHp5ayy6BU3LrFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:17:c3:68:fd:83:b6:3e:2a:9a:e5:b5:fc:49:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Sep 25 15:02:44 2026 GMT
Not After : Sep 26 15:02:44 2026 GMT
Subject: CN=c60b5f2009792c8df91684e3037238776395212a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:06:19:ec:27:ce:50:6e:e7:8b:a5:ff:81:
f8:89:f0:9f:10:19:6a:ca:63:37:f3:30:75:e8:82:
cc:b9:ab:f2:7d:d6:1a:2b:3d:0e:17:3f:4a:74:9f:
1d:a5:da:a2:4a:e4:f5:a0:74:61:9b:0c:a8:37:f6:
75:15:56:71:f2:b2:bc:4f:10:2b:f0:50:14:6c:42:
c4:10:30:00:09:7c:db:38:ab:24:75:4c:ca:94:59:
e1:e9:9f:d6:cc:dd:9f:43:4e:d1:4f:0e:f3:e7:be:
30:c1:6b:f1:b6:91:1c:1a:da:88:4a:31:10:9e:da:
68:b2:cc:73:54:ff:99:48:99:65:f5:61:5b:1b:75:
8c:bf:ac:d3:a8:08:ad:79:f4:0b:b1:68:f6:7e:8e:
ae:67:2e:13:42:35:d6:ab:eb:89:52:aa:be:13:a3:
46:76:40:47:0f:20:c7:01:ab:b7:ea:6c:d6:14:8f:
cf:15:81:4b:a6:a9:38:79:6e:21:28:ef:c4:4c:b9:
65:f5:c2:7d:68:59:33:81:9b:5d:7f:87:ff:c1:d5:
64:b5:85:f8:eb:00:63:2d:2d:2d:6c:08:84:63:77:
57:5b:3f:1c:db:8b:2a:f4:91:f8:2e:e1:6d:40:cc:
ce:32:8a:fa:fa:53:0f:52:87:d7:65:0b:17:31:84:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:5F:20:09:79:2C:8D:F9:16:84:E3:03:72:38:77:63:95:21:2A
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:b3:49:26:7e:26:7b:57:81:66:55:83:f3:df:4f:ad:f4:
f6:01:3c:68:69:47:52:d5:7c:23:e2:e6:9c:83:12:b4:07:4c:
cd:df:d0:2f:f2:43:46:ed:ef:56:e1:25:72:5d:08:5f:90:71:
ae:5c:fc:e1:b5:9a:61:17:e5:25:96:f2:01:bc:a6:16:5a:4d:
0a:15:c5:7d:34:89:d9:79:31:ee:af:d2:78:09:d4:b5:2e:1f:
68:62:d2:86:d6:b3:9e:eb:93:95:58:f7:b5:3f:64:88:2b:52:
ad:c5:45:0b:6d:f1:3c:d8:09:b0:7f:ef:8c:4c:09:81:99:d3:
17:1c:13:fe:13:47:87:f2:03:50:e2:2d:b0:7f:81:bb:54:1a:
bc:06:36:59:d8:ef:37:16:6d:b0:78:90:2f:67:b6:a8:81:9b:
e4:b5:67:e8:17:b3:ab:37:4a:45:c7:e1:b5:0d:3b:40:23:c6:
26:26:80:5a:69:84:bb:f8:bf:2c:39:ea:f9:0d:52:5f:6c:5a:
bf:cf:6b:76:f7:dc:68:71:24:52:58:cc:50:dd:3b:b9:2d:31:
48:e0:d1:20:e4:8e:ce:8a:73:c2:ad:d3:1f:61:50:aa:b6:19:
2b:34:cb:6e:9e:fd:b4:9c:54:62:04:74:b1:38:7b:21:fa:6f:
75:6b:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:28:01 2026 by rpki-client